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(57) Abstract: The present invention provides means and method for Single Sign-On authentication of a user accessing a service 
network through an access network when the user has been already authenticated by a core network where the user holds a subscrip- 
tion. Therefore, a number of means are provided in different entities distributed between the core network and the service network, as 
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in the service network a shared key for the user submitted from the core network with another shared key for the user derived at the 
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